Dell Products Inc.

Emc IP Holding Company LLC

Emc Corporation

Other

Muzhar S Khokhar

Haijun Zhong

Xiaojun Wu

Michael G Varteresian

Wenfeng Li

Charles S Langley

Shyam Reddy

Donald Mace

Ching-Yun Chao

Vinay Sawal

Ken Kim

Rajini Ramachandran Karthik

Joseph Bet-Eivazi

Ankita A Pawar

Edward Guohua Ding

Lewei Ji

Drake Yuan Qiu

Chao Chen

Shibi Panikkar

Jun Wu

Bradley K Goodman

Xiaoye Jiang

Daniel E Cummins

Anurag Sharma

Jason Matthew Young

Qing Li

Joseph Caisse

Stav Sapir

Haitao Zhou

Brian R Tetreault

Peter Beale

Qi Jin

Deborah C Russell

Yi Fang

Jim LeWei Ji

Reddeppa Kollu

Scott M Geng

Anil Venkatesh Varkhedi

Matthew P Jean

Eric Wu

Jian Liu

Minqiang Wu

Han Gao

Xiang Huang

Wenyu Tang

Bruce A Zimmerman

Somchai Pitchayanonnetr

Deepak Krishna

Wen Yu Tang

Huiying Shen

HongYao Tang

Ratnesh Yadav

Vivian Jian

Brian Rochford

Andrea Roggerone

Puneeth Chowdary Kosaraju

Eric Randal Young

Vamshi Challa

Bhaswati Neog

Steve Langley

Jiangping Sun

Ankur Prakash Suratwala

Chau Phan

Naveen Kumar

Michael P Thibault

Shashank Holakkal

Sooraj Nair

Yuyan Chen

Binbin Wu

Stéphane Meng

Chen Liang

Jing J Chen

Methods and systems for managing operation of infrastructure are disclosed. The operation of the infrastructure may be managed by limiting activity that may be performed by the infrastructure. The activity may be limited by restricting tasks that may be added to queues of tasks that the infrastructure is authorized to perform. The content of the queues may be limited during workflow selection, task identified for workflows, and service registration for servicing the queues. The content may be limited using a combination of registration requirements, role based restrictions, and token requirements.

Methods and apparatus for enhancing security in the orchestration platform

A microservice management method responds to receiving a function request, comprising a request for a particular function, by collecting function metadata for the particular function and sending the function request and the function metadata to a cloud side orchestrator. The function metadata include one or more prerequisite for an execution environment. Suitable microservices for the particular function are identified, in accordance with the function metadata. The identified microservices are sent to an edge side orchestrator that installs, initializes, and monitors these microservices and, responsive to detecting complete execution of the particular function, terminates one or more of the suitable microservices. The identification of suitable microservices may be based, at least in part, on one or more preference factors including a dependency factor, indicative of a historical dependency between the particular function and one or more microservices and a relevance factor indicative of whether a microservice edge-type microservice.

Life cycle management of run time services in edge computing environment

An information handling system cluster may include a plurality of nodes, each node including at least one processor and a memory. A particular node of the information handling system cluster may be configured to: receive management instructions from a central management system; cause the management instructions to be executed by other nodes of the information handling system cluster; receive result information from the other nodes; and transmit the result information to the central management system.

Autonomous edge computing system management

Methods and systems for managing operation of data processing systems are disclosed. A management system may obtain resource data based on operation of the data processing systems while using resources managed by the management system. The resource data may be semantically enhanced based on ontology definitions and represented as a graph structure. The graph structure may be used by a graph inference model (e.g., a graph neural network) to obtain predicted tags for the resources. The graph inference model may be based on a plurality of graph structures that may provide information regarding generalized relationships between at least the resources. The predicted tags may be used by the management system to update operation of the data processing systems.

Managing resources using a graph inference model to infer tags

A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: receiving data center asset data, the data center asset data comprising historical data center asset telemetry data; training a prediction model to generate predictions using the historical data center asset telemetry data; and, interpolating additional data center asset telemetry data using the predications generated using the prediction model.

Data center monitoring and management operation including data center asset telemetry interpolation operation

An information handling system may include at least one processor and a memory. The information handling system may be configured to: receive, from a cloud management portal, a request to execute a management task, wherein the request includes information regarding a cloud identity associated with the request; determine a local identity that corresponds to the cloud identity; determine whether the local identity has sufficient privileges to execute the management task; and in response to a determination that the local identity does have sufficient privileges to execute the management task, cause the management task to be executed.

Role-based access control for cloud features

A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: providing the data center asset to a prospective owner; establishing a secure communication channel between an onboarding system and the data center asset; establishing a communication channel between a rendezvous server and the data center asset; exchanging information between the onboarding system and the data center asset via the secure communication channel, the information including a data center asset ownership voucher; maintaining the data center asset ownership voucher at the rendezvous server; and, using the data center asset ownership voucher to associate the data center asset with the prospective owner.

Data center asset authentication for a prospective data center asset owner via an onboarding operation

A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: receiving data center asset workload data; capturing a set of the data center asset workload data at predefined time intervals; monitoring data center workload performance using the set of the data center asset workload data; and, predicting an anomaly associated with data center workload performance based upon the monitoring.

Data center workload monitoring via a data center monitoring and management operation

A voucher management system receives, from a computing device manufacturer system, an ownership voucher that transfers ownership of a computing device from the computing device manufacturer system to the voucher management system, and a hardware attestation certificate for the computing device, and associates them with the computing device in a voucher management database. When the voucher management system determines that the ownership of the computing device should be transferred to an end user system, it automatically generates second ownership transfer data by signing an end user system public key with a voucher management system private key, provides the second ownership transfer data in the ownership voucher in order to transfer ownership of the computing device from the voucher management system to the end user system, and provides the ownership voucher and the hardware attestation certificate to the end user system.

Fast identity online (FIDO) device onboarding (FDO) protocol computing device hardware attestation system

A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: embedding a unique identifier within a data center asset, the unique identifier including a signed certificate; providing the data center asset to a customer; establishing a secure communication channel between an onboarding system and the data center asset, the secure communication channel using the signed certificate; exchanging information between the onboarding system and the data center asset via the secure communication channel, the information including a data center asset ownership voucher; and, using the data center asset ownership voucher to associate the data center asset to the customer.

Data center asset authentication via an onboarding operation

Disclosed methods and systems for managing on-premises information handling resources establish, by an in-cloud web portal, an agentless connection to an on-premises information handling resource and perform, via the agentless connection, a configuration management operation to modify a configuration of the on-premises handling resource. Establishing the agentless connection and performing the configuration management operation may include one or more appropriate API calls. Disclosed teachings enable a web-accessible, public cloud portal to perform active configuration management of on-premises resources scattered across any number of distinct and potentially isolated customer sites without deploying and maintaining management agent software within the customer's private cloud. The on-premises resources may include a multi-node cluster provided by a node or nodes of one or more HCI appliances.

Centralized and agentless in-cloud management of on-premises resources

An information handling system may include at least one processor and a memory. The information handling system may be configured to determine names for a plurality of other information handling systems that are on-premises at a particular datacenter having a local network associated therewith; poll a selected subset of the plurality of other information handling systems via the local network; based on results of the polling, determine whether the information handling system is on-premises at the particular datacenter; and in response to a determination that the information handling system is on-premises at the particular datacenter, enable access to at least one sensitive administration operation associated with the particular datacenter.

Detection of on-premises systems

Methods and systems disclosed herein extend an entity's private cloud security model to the entity's public cloud. Public cloud access permissions are defined, in accordance with a security model implemented in the entity's private cloud, for one or more of the entity's public cloud resources. The public cloud permissions are pushed or otherwise provided to an access module within the private cloud. Upon receiving a request to access a public cloud resource, the private cloud access module is invoked to grant or deny the access request in accordance with the public cloud access permissions. Similarly, upon receiving a request to access a private cloud resource, the private cloud access module is invoked to process the access request in accordance with private cloud access permissions, thereby beneficially enabling users to interact with a single access interface regardless of whether the resource reside within the entity's cloud platform.

Extending private cloud security model to public cloud

A disclosed method for managing access control in cloud based environment with on-premises and off-premises access portals includes storing account mapping information, indicative of an association between on-premises accounts off-premises accounts, to a lockbox in each of the plurality of clusters and deploying an off-premises agent in each of the clusters. One or more of the clusters may exist within a hyper-converged infrastructure system. Each off-premises agent may be configured to retrieve cluster access information indicative of access permissions for the on-premises node cluster and upload the cluster access information to an off-premises access control service. The access permissions for the on-premises cluster and the off-premises access permissions may comprise role based access permissions. The off-premises access control service is coupled to an off-premises portal and enables the off-premises portal to switch its access control permissions between on-premises access permissions and off-premises permissions in accordance with the targeted resource.

Managing on-premises and off-premises access control

A disclosed security broker receives a request message addressed to a message queue associated with an edge resource, identifies the message source, and leverages an authentication module to verify that the source has authorization to access the targeted message queue. The security broker may then deliver the request message to the targeted edge resource message queue. If the edge resource and security broker are physically isolated, the security broker may format the request message as a file, store the file to a storage device, and transfer the storage device to the edge resource, which may then process the file and upload the request message to the edge resource's message queue module. The security broker also monitors a response message from the edge resource, purges sensitive data from the response. If the broker and cloud resource are physically isolated, the response may be formatted and delivered as a file.

Security broker for edge computing environment

Growing community of inventors

Shrewsbury, MA, United States of America

Muzhar S Khokhar